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SPECIFICATION 

1. Title of the Invention 

Self -Destroying Method for Personal Identification 

Apparatuses 

2. Scope of the Claims 

A self -destroying method for personal 
identification apparatuses, characterized in that: 

upon detection of an external force applied to a 
personal identification apparatus (step 1) , 

an alarm is issued (step 2) , and 

registered data, collating circuits, control circuits 
and the like are destroyed by using destroying means (step 
3) - 

3 . Detailed Description of the Invention 
[Summary] 

The invention relates to a self -destroying method for 
personal identification apparatuses, such as fingerprint 
collation apparatuses or the like, 

is intended to maintain a higher level of security by 
reliably destroying registered data and the like when an 
external force is applied to a personal identification 
apparatus, and 

is so configured as to issue an alarm upon detecting 
the application of an external force on the personal 
identification apparatus , and to destroy registered data, 
collating circuits, control circuits and the like by using 
destroying means. 
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[Field of Industrial Application] 

The present invention relates to a 
self -destroying method for personal identification 
apparatuses, such as fingerprint collation 
apparatuses or the like. 

In recent years, along with the introduction of 
computers in extensive social systems, interested 
parties' concern is focusing on system security. Many 
questions have been raised with a view to ensuring security 
to ID cards and passwords conventionally used as personal 
identification means for entrance into a computer room or 
using a terminal. In this connection, fingerprints are 
considered the most useful means for personal identification 
on account of their two major characteristics including the 
difference from individual to individual without exception 
and the unchange ability for life. 

For such a method of personal identification, it is 
desirable to enable information on individuals and the like 
to be destroyed to secure the confidentiality of information 
to which an external force has been applied in addition to 
ensuring credibility of personal identification. 
[Prior Art] 

In the case of the aforementioned personal 
identification apparatus, an inputted fingerprint 
pattern is collated with the personal fingerprint 
pattern registered in advance and, when they are 
found identical, the former is judged to be 
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legitimate. This kind of personal identification 
apparatus is used for managing entrances to and exits 
from important facilities among other purposes . it 
also can be applied anywhere as long as there is a 
lock. 

Pig- 5 is a block diagram showing an example of 
conventional configuration of a fingerprint collating system, 
which is a kind of personal identification apparatus . 
in such a system, a fingerprint is usually handled 
as an image. A finger print image signal (analog 
signal) inputted from a finger print input sensor 1 is 
converted into image data (digital data) by an input device 
2 that follows, and delivered to a collating device 3. 

To the collating device 3 is connected a memory device 
4 in which image data of person-by-person fingerprints 
{fingerprint characteristic point data) is stored in advance . 
And the collating device 3 extracts fingerprint 
characteristic point data from the inputted fingerprint image 
data, and collates it with registered fingerprint 
characteristic point data stored in the memory device 4 . If 
as a result of collation the characteristic points of both 
are found identical, the person will be identified as such. 
[Problems to be Solved by the Invention] 

If the memory device 4 storing fingerprint 
characteristic point data is stolen from such a fingerprint 
collating system, replicas of fingerprints having the same 
characteristics as registrants may be made and abused. 
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Precautionary measures include a method of enciphering the 
image data, but if the collating system is stolen and its 
control circuits and collating circuits are analyzed, even 
the enciphered fingerprint characteristic point data may be 
analyzed. Further, by analyzing the control circuits and 
making some alteration in the control circuits, entrance into 
the important facility without having to go through 
fingerprint collation may be made possible. 

The present invention, attempted in view of these 
problems, is intended toprovide a self -destroying method 
for personal identification apparatuses enabling, 
when an external force is applied to a personal 
identification apparatus, registered data and the 
like to be reliably destroyed thereby to maintain 
a higher level of security. 
(Means to Solve the Problems] 

Pig. 1 is a flowchart illustrating the principle of the 
method of the present invention. The invention is 
characterized in that: 

upon detection of an external force applied to a 
personal identification apparatus {step 1), 

an alarm is issued {step 2) , and 

registered data, collating circuits, control circuits 
and the like are destroyed by using destroying means (step 
3) . 

[Actions] 

Upon detection of any external force applied to a 
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personal identification apparatus, registered data, 
collating-circuits, control circuits and the like are forcibly- 
destroyed by using destroying means- Information 
regarding individuals can be thereby reliably destroyed 
to maintain a high level of security, 
[Embodiments] 

Embodiments of the present invention will be described 
in detail below with reference to drawings . 

Pig. 2 is a diagram showing an example of configuration 
of the system for implementing the method of the invention. 
Reference numeral 10 denotes a personal identification 
apparatus, provided inside with an optical detector 
li. This optical detector n is connected to a circuit 
destroying device 12, and an on/off - signal input plug 13 
extends outward from the circuit destroying device 12. 

If , in an apparatus configured in this manner , an external 
force is applied to the outer case of the personal 
identification apparatus 10, which is thereby destroyed, 
an external light comes into the device from outside. Upon 
detection of this light, the optical detector li actuates 
an alarm (not shown) to make the occurrence of abnormality 
known. At the same time it gives a signal to that effect 
to the circuit device destroying device 12. When informed 
of the entrance of the external light, the device destroying 
device 12 performs deletion of registered fingerprint image 
data (characteristic point data) by resetting memories, 
deletion of ROM data in control circuits and collating 
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circuits, or destruction of LSIs, ICs and the like with a 
high voltage. Incidentally, the on/off signal input plug 
13 constitutes a signal input unit for switching-over between 
the operation and non-operation of the device destroying 
device 12; if, for instance, an on signal is inputted from 
the on/off signal input plug 13, the device destroying device 
12 will be placed in a standby- for-operat ion state. Or if 
an off signal is inputted from the on/off signal input plug 
13, the device destroying device 12 will be placed in an 
operation- stopped state. 

Fig, 3 is a diagram showing another example of 
configuration of the system for implementing the method of 
the invention, wherein a magnetic detector is used as the 
sensor. In the drawing, reference numeral 20 denotes a 
personal identification apparatus, which is fitted 
to a wall 21. Numeral 20a denotes circuits such as a 
collation device , a memory device and so forth provided within 
the personal identification apparatus 2 0 (hereinafter 
referred to as internal circuits) . 

Numeral 22 denotes a magnetic detector provided in the 
personal identification apparatus 20, and the detector is 
connected to a circuit destroying device 23. Numeral 24 
denotes an on/off signal input plug, whose function is the 
same as that of its counterpart in Fig. 2 . Numeral 25 denotes 
a magnet disposed in a position corresponding to the magnetic 
detector 22 , and the magnet is fitted within or to the surface 
of the wall 21. Numeral 26 denotes an alarm connected to 
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the magnetic detector 22. 

In the system configured in this maimer, if the personal 
identification apparatus 20 is forcibly peeledoff the surf ace 
of the wall 21 Without a prescribed procedure being gone 
through, the magnetic detector 22 will move away from the 
magnet 25 and accordingly its output will weaken. The 
magnetic detector 22 is thereby enabled to detect the peeling 
of the personal identification apparatus 20 off the wall 
surface. This causes the magnetic detector 22 to detect the 
occurrence of abnormality, and report the abnormality by 
sounding the alarm 26. At the same time it notifies the circuit 
destroying device 23 of the abnormality. When notified of 
the abnormality, the circuit destroying device 2 3 destroys 
the internal circuits 2 0a. A contingent accident of stealing 
of information on individuals can be thereby prevented from 
occurring. 

Fig. 4 is a diagram showing still another example of 
configuration of the system for implementing the method of 
the invention, wherein a vibration detector is used as the 
sensor. In the drawing, reference numeral 30 denotes a 
personal identification apparatus , which has, built into it, 
internal circuits 30a similar to their counterparts in Fig. 
3. Numeral 31 denotes a vibration detector which detects 
vibration and also analyzes it; and 32 denotes a circuit 
destroying device which, in response to an output of the 
vibration detector 31, performs a circuit destroying action. 
Numeral 33 denotes an alarm* connected to the vibration 
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detector 31 . Numeral 34 denotes an on/off signal input plug/ 
whose function is the same as that of its counterpart in Fig. 
3, 

In the system configured in this manner, if the vibration 
detector 31 detects vibration which would arise when the outer 
case is destroyed or removed, it will report the abnormality 
by sounding the alarm 33 and at the same time notify the circuit 
destroying device 32 of that occurrence. In response, the 
circuit destroying device 32 destroys the internal circuits 
30a. More specifically, it performs deletion of registered 
fingerprint image data by resetting memories, deletion of 
ROM data in control circuits and collating circuits, or 
destruction of LSIs, ics and the like with a high voltage. 
Incidentally, in this case vibration due to such abnormality 
and vibration due to an earthquake can be distinguished from 
each other by detecting the P wave and the 5 wave 
earthquake -deriving vibration would have. 

In any of the embodiments described above, the 
configuration should be such that the sequence of operations 
be performed with a backup power source {e.g. a battery or 
the like) so that operation is possible even if the power 
supply to the personal identification apparatus is cut off. 
Also, in order to enable the above-described systems to be 
produced in a factory or to undergo maintenance after their 
installation, a function to freely actuate and stop the 
destroying device will be needed. Methods used for actuating 
the destroying device include , in order to stop the operation 
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of the destroying device, one by which a stop signal ie inputted 
through a signal input plug disposed on the outer case of 
the personal identification apparatus and another by which 
a tool is used to input an operation stop signal through a 
hole bored in the outer case of the personal identification 
apparatus. To add, the destroying device is so set as to 
immediately start operation when a current or a voltage above 
the permissible limit is applied to the on/off signal input 
plug- 

[Effects of the Invention) 

As hitherto described in detail, according to the 
present invention, it is made possible, when any external 
force (destruction, robbery, unsealing or the like) is 
applied to a personal identification apparatus, to detect 
that occurrence, prevent registered data from being copied 
or forged by destroying all or some of the registered data, 
control circuits, collating circuits and the like in the 
apparatus, and further to make analysis of control and 
collation lines impossible, resulting in significant 
practical effects. 

4. Brief Description of the Drawings 

Fig. 1 is a flowchart illustrating the principle of the 
method of the present invention; 

Pig. 2 is a diagram showing an example of configuration 
of the system for implementing the method of the invention; 

Fig. 3 and Fig. 4 are diagrams showing other examples 
of configuration of the system for implementing the method 
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of the invention; and 

Fig. 5 is a block diagram showing an example of 
conventional configuration of a fingerprint collating 
system. 

Applicant for Patent: FUJITSU LIMITED 

Representatives: Toji Ijima, patent attorney, and one other 
person 
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Pig. l 

Flowchart illustrating principle of invented method 

Start 

Step 1 

Detect application of external force to personal 
identification apparatus 
Step 2 
Issue alarm 
Step 3 

Destroy registered data, collating circuits, control 

circuits, etc. by using destroying means 

End 

Fig. 2 

Diagram showing example of configuration of system for 
implementing invented method 
External light i9V9t) 

10: Personal identification apparatus 

11: Optical detector 

12 : Circuit destroying device 

13 ; On/off signal input plug 

Fig, 3 

Diagram showing another example of configuration of system 

for implementing invented method 

20: Personal identification apparatus 

2 0a: Internal circuits 
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21: Wall 

22: Magnetic detector device 
23 : Circuit destroying device 
24: On/off signal input plug 
25: Magnet 

2 6 : Alarm 

Fig. 4 

Diagram showing another example of configuration of system 
for implementing invented method 

3 0a: Internial circuits 
31: Vibration detector 

32: Circuit destroying device 
34 : On/ of f signal input plug 
33 : Alarm 

Fig. 5 

Block diagram showing example of conventional configuration 

of fingerprint collating system 

1: Finger print input sensor 

2 : Input device 

3 : Collating device 

4 : Memory device 
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